Sign-up

VARIoT news about IoT security

NAS-maker Synology reveals new remote code execution vulnerabilities

Trust: 5.0

Fetched: Jan. 18, 2022, 11:35 a.m., Published: Aug. 27, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: synology model: synology router manager
vendor: synology model: router manager
vendor: synology model: diskstation manager
vendor: synology model: diskstation
db: NVD ids: CVE-2021-3712, CVE-2021-3711

Cisco Talos Intelligence Group - Comprehensive Threat Intelligence: Vulnerability Spotlight: Multiple vulnerabilities in ZTE MF971R LTE router

Related entries in the VARIoT vulnerabilities database: VAR-202110-0397, VAR-202110-0396

Trust: 5.5

Fetched: Jan. 18, 2022, 11:35 a.m., Published: Jan. 13, 2022, midnight
 Vulnerabilities: buffer overflow, cross-site scripting
Affected productsExternal IDs
vendor: snort model: snort
vendor: snort.org model: snort
vendor: cisco model: router
vendor: cisco model: firepower
vendor: cisco model: firepower management center
db: NVD ids: CVE-2021-21745, CVE-2021-21748

Security Vulnerabilities fixed in Firefox 94 - Mozilla

Trust: 3.0

Fetched: Jan. 18, 2022, 11:35 a.m., Published: Oct. 18, 2021, midnight
 Vulnerabilities: memory corruption
Affected productsExternal IDs

HP Threat Research Shows Attackers Exploiting Zero‐Day Vulnerability before Enterprises Can Patch | WebWire

Related entries in the VARIoT vulnerabilities database: VAR-202109-1909

Trust: 3.75

Fetched: Jan. 18, 2022, 11:35 a.m., Published: Dec. 2, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-404441, CVE-2021-40444

Cisco Talos Intelligence Group - Comprehensive Threat Intelligence: Vulnerability Spotlight: Vulnerabilities in Lantronix PremierWave 2050 could lead to code execution, file deletion

Trust: 5.5

Fetched: Jan. 18, 2022, 11:34 a.m., Published: Jan. 13, 2022, midnight
 Vulnerabilities: code execution, local file inclusion, file inclusion...
Affected productsExternal IDs
vendor: cisco model: firepower
vendor: cisco model: firepower management center
vendor: snort model: snort
vendor: snort.org model: snort
db: NVD ids: CVE-2021-21878, CVE-2021-21886, CVE-2021-21896

Cisco Talos Intelligence Group - Comprehensive Threat Intelligence: Cisco Talos finds 10 vulnerabilities in Azure Sphere’s Linux kernel, Security Monitor and Pluton

Related entries in the VARIoT vulnerabilities database: VAR-202111-0789, VAR-202111-0473

Trust: 5.25

Fetched: Jan. 18, 2022, 11:34 a.m., Published: Jan. 13, 2022, midnight
 Vulnerabilities: denial of service, information leak, information disclosure
Affected productsExternal IDs
vendor: snort model: snort
vendor: snort.org model: snort
db: NVD ids: CVE-2021-41375, CVE-2021-42300, CVE-2021-41374, CVE-2021-41376

Microsoft Surface Pro 3 Security Feature Bypass Vulnerability Surface - Windows 10 Forums

Trust: 3.0

Fetched: Jan. 18, 2022, 11:33 a.m., Published: Jan. 13, 2022, midnight
 Vulnerabilities: security feature bypass, feature bypass
Affected productsExternal IDs

NVD - CVE-2021-34776

Trust: 3.0

Fetched: Jan. 18, 2022, 11:33 a.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-34776

Linux Vulnerability Scanner | Linux Vulnerability Scanning Tool - ManageEngine Vulnerability Manager Plus

Trust: 3.25

Fetched: Jan. 18, 2022, 11:33 a.m., Published: Dec. 18, 2021, 11:33 a.m.
 Vulnerabilities: denial of service, code execution, cross-site scripting
Affected productsExternal IDs
vendor: delegate model: delegate
vendor: rising model: antivirus

Will this Account Lockout mechanism increase the severity of a information leakage vulnerability that leaks usernames? - Information Security Stack Exchange

Trust: 3.75

Fetched: Jan. 18, 2022, 11:32 a.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: account lockout, information leakage
Affected productsExternal IDs

Nearly 100 TCP/IP Stack Vulnerabilities Found During 18-Month Research Project

Trust: 4.0

Fetched: Jan. 18, 2022, 11:31 a.m., Published: Nov. 19, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: treck model: tcp/ip stack

Critical Vulnerability Found in More Than 150 HP Printer Models | SecurityWeek.Com

Trust: 3.5

Fetched: Jan. 18, 2022, 11:31 a.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: printers
vendor: samsung model: samsung
vendor: samsung model: printer
db: NVD ids: CVE-2021-39238, CVE-2021-39237

Cybersecurity Risk Lurks in a Common Industrial Operating System | IndustryWeek

Trust: 3.5

Fetched: Jan. 18, 2022, 11:31 a.m., Published: Jan. 18, 2022, 10:31 a.m.
 Vulnerabilities: denial of service, code execution, buffer overflow
Affected productsExternal IDs
vendor: siemens model: nucleus
vendor: siemens model: nucleus net

83 million devices using the Kalay protocol are at risk for remote takeover. Are yours? - TechRepublic

Trust: 3.0

Fetched: Jan. 18, 2022, 11:30 a.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: device impersonation
Affected productsExternal IDs

Senior Security Vulnerability Researcher - Stellen-ID: 1654264 | Amazon.jobs

Trust: 3.75

Fetched: Jan. 18, 2022, 11:30 a.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: memory corruption, privilege escalation
Affected productsExternal IDs
vendor: wireshark model: wireshark

Research finds some medical devices vulnerable to hackers

Trust: 3.0

Fetched: Jan. 18, 2022, 11:28 a.m., Published: Jan. 12, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: nucleus

BrakTooth vulnerabilities put Bluetooth users at risk - and some devices are going unpatched • The Register

Trust: 3.75

Fetched: Jan. 18, 2022, 11:28 a.m., Published: Jan. 13, 2022, midnight
 Vulnerabilities: code execution, denial of service
Affected productsExternal IDs

Apple macOS Flaw Allows Kernel-Level Compromise | Threatpost

Trust: 3.0

Fetched: Jan. 18, 2022, 11:27 a.m., Published: Nov. 30, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos

Why IoT devices are vulnerable? - Quora

Trust: 3.75

Fetched: Jan. 18, 2022, 11:27 a.m., Published: Jan. 13, 2022, midnight
 Vulnerabilities: use after free, denial of service
Affected productsExternal IDs

Netgear router vulnerabilities affecting SME products fixed • The Register

Trust: 3.5

Fetched: Jan. 18, 2022, 11:27 a.m., Published: Jan. 13, 2022, midnight
 Vulnerabilities: code execution, command injection
Affected productsExternal IDs
vendor: netgear model: xr450
vendor: netgear model: xr500
vendor: netgear model: netgear router
vendor: netgear model: r7800
vendor: netgear model: wn3000rpv2
vendor: netgear model: r9000
vendor: netgear model: xr700
vendor: netgear model: ex2700
vendor: netgear model: router
vendor: netgear model: r8900
vendor: netgear model: d7800
vendor: netgear model: wn3000rpv3
vendor: netgear model: lbr20